GitHub CI/CD MCP Server

NPM · @KINUS/GITHUB-CICD-MCP

GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more.

Available components

npm · @kinus/github-cicd-mcp 0

0 0 Trust /100

Last scanned 19 Oct 2026 (7 hours ago)

Scores higher than 0% of npm servers

Category CI/CD and DevOps

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security73

No malware found by supply-chain analysis.Pass
CVE check failed: an unpatched critical CVE affects this package; the score is capped at 0. See how to fix → View diagnostics → Fail
No install/post-install scripts declared.Pass
33 of 116 dependencies flagged as unhealthy. View diagnostics → Partial

Provenance & Transparency48

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 3 days ago).Pass
Publishes a security disclosure policy (SECURITY.md).Pass

Schema Quality & AI Usability66

AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 4500 tokens (~64/item across 70 items; 70 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage94

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
82% of tool parameters carry a description.Partial

Tool Safety75

No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
0 of 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "github_merge_pull_request" implies "merge" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
An AI judge read all 71 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

14 Oct 26 0
- Injection markers: unverified → pass ▲ security
- First check of Judged manipulation: pass security
- Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
- Tool coverage: unverified → 100 ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Security disclosure: unverified → pass ▲ functional
- First check of Schema quality: fail functional
- First check of Destructive annotations: 0 functional
- First check of Schema quality: pass functional
- First check of Schema quality: good functional
- First check of Tool coverage: 82 functional
13 Oct 26 0

First indexed and scored.

Show 1 earlier entry Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 19 Oct 2026 · Analysed npm/@kinus/github-cicd-mcp@1.2.2

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result	No attestation
Ecosystem	npm

Background: How many MCP packages publish verified provenance →

Vulnerabilities 4 findings

ID	CVE	Severity	Vector	Fix available
GHSA-v5rq-49vh-5v5c	CVE-2026-102829	critical		yes
GHSA-858h-whjf-mvg5	CVE-2026-102827	high	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	yes
GHSA-g4wm-2vf7-vfgr	CVE-2026-102826	high	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	yes
GHSA-x6jw-m9v5-85vh	CVE-2026-102828	critical		yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 116 packages

Packages resolved	116
Stale	33
Tree resolution	Complete

Background: SBOMs and build attestations, explained →

MCP tools · 70 exposed · ~4,414 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens

git_clone ~55

Clone a repository into a directory (uses local git, not API).

Input Output Examples

Name	Type	Req	Description
branch	string	–	Optional branch to checkout
directory	string	yes	Target directory path
url	string	yes	HTTPS or SSH clone URL

No output schema declared.

No examples provided.

git_commit ~58

Stage all changes and create a local commit.

Input Output Examples

Name	Type	Req	Description
all	boolean	–	Stage all changes (default true). If false, only staged files
message	string	yes	Commit message
path	string	yes	Path to git repository root

No output schema declared.

No examples provided.

git_log ~42

Recent commit log on current branch.

Input Output Examples

Name	Type	Req	Description
max_count	number	–	Number of commits (default 10)
path	string	yes	Path to git repository root

No output schema declared.

No examples provided.

git_pull ~65

Pull from remote with rebase (ff-only friendly for CI branches).

Input Output Examples

Name	Type	Req	Description
branch	string	–	–
path	string	yes	Path to git repository root
rebase	boolean	–	Use --rebase (default true)
remote	string	–	Default origin

No output schema declared.

No examples provided.

git_push ~79

Push commits to remote (set upstream on first push if needed).

Input Output Examples

Name	Type	Req	Description
branch	string	–	Branch to push; default current branch
path	string	yes	Path to git repository root
remote	string	–	Remote name (default origin)
set_upstream	boolean	–	Use -u on push (default true for new branches)

No output schema declared.

No examples provided.

git_status ~37

Show working tree status in a local clone (branch, staged/unstaged files).

Input Output Examples

Name	Type	Req	Description
path	string	yes	Path to git repository root

No output schema declared.

No examples provided.

github_add_collaborator ~70

Invite or add a collaborator to a repository.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
permission	string	–	pull \| push \| admin \| maintain \| triage (default push)
repo	string	yes	Repository name
username	string	yes	–

No output schema declared.

No examples provided.

github_add_issue_comment ~58

Add a comment to an issue or pull request.

Input Output Examples

Name	Type	Req	Description
body	string	yes	–
issue_number	number	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_cancel_workflow_run ~49

Cancel an in-progress workflow run.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
run_id	number	yes	–

No output schema declared.

No examples provided.

github_compare_commits ~72

Compare two commits (base...head) — useful for release notes and PR scope.

Input Output Examples

Name	Type	Req	Description
base	string	yes	Base ref or SHA
head	string	yes	Head ref or SHA
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_create_branch ~74

Create a branch from an existing ref (e.g. main).

Input Output Examples

Name	Type	Req	Description
branch	string	yes	New branch name
from_ref	string	–	Source ref (branch or SHA). Default: default branch
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_create_commit ~112

Create a commit on a branch by updating one or more files (GitHub Git API — no local clone required).

Input Output Examples

Name	Type	Req	Description
branch	string	yes	Branch to commit to
files	string	yes	JSON array of { "path": "src/a.ts", "content": "...", "encoding": "utf-8" \| "base64" }
message	string	yes	Commit message
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_create_deployment ~114

Create a deployment for a ref (triggers deployment workflows / environments).

Input Output Examples

Name	Type	Req	Description
auto_merge	boolean	–	Merge default branch into ref
description	string	–	–
environment	string	–	e.g. production, staging
owner	string	yes	Repository owner (user or org login)
ref	string	yes	Branch, tag, or SHA
repo	string	yes	Repository name
required_contexts	string	–	JSON array of status check names, or "[]" for none

No output schema declared.

No examples provided.

github_create_deployment_status ~97

Update deployment status (success, failure, in_progress) for CD observability.

Input Output Examples

Name	Type	Req	Description
deployment_id	number	yes	–
description	string	–	–
environment_url	string	–	Live site URL
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
state	string	yes	error \| failure \| inactive \| in_progress \| queued \| pending \| success

No output schema declared.

No examples provided.

github_create_issue ~80

Create an issue in a repository.

Input Output Examples

Name	Type	Req	Description
assignees	string	–	JSON array of GitHub usernames
body	string	–	–
labels	string	–	JSON array of label names
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
title	string	yes	–

No output schema declared.

No examples provided.

github_create_pull_request ~101

Open a pull request (base ← head).

Input Output Examples

Name	Type	Req	Description
base	string	yes	Base branch (e.g. main)
body	string	–	PR description (markdown)
draft	boolean	–	Create as draft PR
head	string	yes	Head branch (or user:branch for forks)
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
title	string	yes	–

No output schema declared.

No examples provided.

github_create_pull_request_review ~79

Submit a PR review (comment, approve, or request changes).

Input Output Examples

Name	Type	Req	Description
body	string	–	Review comment
event	string	yes	COMMENT \| APPROVE \| REQUEST_CHANGES
owner	string	yes	Repository owner (user or org login)
pull_number	number	yes	–
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_create_release ~118

Create a GitHub release (optionally from an existing tag).

Input Output Examples

Name	Type	Req	Description
body	string	–	Release notes (markdown)
draft	boolean	–	–
name	string	–	Release title
owner	string	yes	Repository owner (user or org login)
prerelease	boolean	–	–
repo	string	yes	Repository name
tag_name	string	yes	Tag for the release, e.g. v1.0.0
target_commitish	string	–	Branch or commit if tag is new

No output schema declared.

No examples provided.

github_create_repository ~97

Create a new repository for the authenticated user or an organization.

Input Output Examples

Name	Type	Req	Description
auto_init	boolean	–	Initialize with README (default true)
description	string	–	Short description
gitignore_template	string	–	Gitignore template name, e.g. Node
name	string	yes	Repository name
org	string	–	Organization login; omit for user account
private	boolean	–	Private repo (default false)

No output schema declared.

No examples provided.

github_create_tag ~89

Create a lightweight or annotated tag ref via the Git API.

Input Output Examples

Name	Type	Req	Description
message	string	–	If set, creates an annotated tag object
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
sha	string	yes	Commit SHA to tag
tag	string	yes	Tag name, e.g. v1.0.0

No output schema declared.

No examples provided.

github_create_webhook ~89

Create a repository webhook (e.g. for CI notifications).

Input Output Examples

Name	Type	Req	Description
active	boolean	–	–
events	string	–	JSON array of events, default ["push","pull_request"]
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
secret	string	–	Webhook secret
url	string	yes	Payload URL

No output schema declared.

No examples provided.

github_delete_branch_protection ~48

Remove branch protection from a branch.

Input Output Examples

Name	Type	Req	Description
branch	string	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_delete_webhook ~48

Delete a repository webhook by ID.

Input Output Examples

Name	Type	Req	Description
hook_id	number	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_dispatch_workflow ~88

Trigger a workflow_dispatch event (manual CI run).

Input Output Examples

Name	Type	Req	Description
inputs	string	–	JSON object of workflow input key/value pairs
owner	string	yes	Repository owner (user or org login)
ref	string	yes	Branch or tag to run on
repo	string	yes	Repository name
workflow_id	string	yes	Workflow ID or filename e.g. deploy.yml

No output schema declared.

No examples provided.

github_download_workflow_artifact ~60

Get download URL metadata for a workflow artifact (follow URL with auth to download zip).

Input Output Examples

Name	Type	Req	Description
artifact_id	number	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_fork_repository ~73

Fork a repository to the authenticated user or an organization.

Input Output Examples

Name	Type	Req	Description
default_branch_only	boolean	–	Fork only default branch
organization	string	–	Org to fork into; default: your user
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_authenticated_user ~24

Get the authenticated GitHub user (validates token and shows login).

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

github_get_branch ~46

Get branch metadata including protection status.

Input Output Examples

Name	Type	Req	Description
branch	string	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_branch_protection ~49

Get branch protection rules for a branch.

Input Output Examples

Name	Type	Req	Description
branch	string	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_combined_status ~62

Get combined commit status (legacy statuses + check runs summary) for CI/CD gates.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
ref	string	yes	Commit SHA or ref
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_commit ~49

Get a single commit with files changed.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
ref	string	yes	Commit SHA
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_issue ~46

Get issue details by number.

Input Output Examples

Name	Type	Req	Description
issue_number	number	yes	–
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_org_billing_actions ~30

Get GitHub Actions billing for an organization.

Input Output Examples

Name	Type	Req	Description
org	string	yes	Organization login

No output schema declared.

No examples provided.

github_get_org_billing_overview ~37

Get combined billing overview for an org (Actions, Packages, shared storage).

Input Output Examples

Name	Type	Req	Description
org	string	yes	Organization login

No output schema declared.

No examples provided.

github_get_org_billing_usage_report ~35

Request billing usage export metadata (org plans — requires billing admin).

Input Output Examples

Name	Type	Req	Description
org	string	yes	Organization login

No output schema declared.

No examples provided.

github_get_pull_request ~49

Get pull request details including merge status.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
pull_number	number	yes	–
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_rate_limit ~21

Check REST API rate limit status for the current token.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

github_get_release_by_tag ~60

Get a release by tag name.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
tag	string	yes	Tag name, e.g. v1.0.0

No output schema declared.

No examples provided.

github_get_repository ~36

Get repository metadata.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_get_user_billing_actions ~29

Get GitHub Actions billing summary for the authenticated user (minutes, included vs paid).

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

github_get_workflow_run ~50

Get details for a single workflow run.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name
run_id	number	yes	–

No output schema declared.

No examples provided.

github_graphql_mutation ~54

Run a GitHub GraphQL mutation (create/update via GraphQL API). Use with care.

Input Output Examples

Name	Type	Req	Description
query	string	yes	GraphQL mutation string
variables	string	–	JSON object of GraphQL variables

No output schema declared.

No examples provided.

github_graphql_query ~55

Run a read-only GitHub GraphQL query (https://docs.github.com/en/graphql). Variables optional.

Input Output Examples

Name	Type	Req	Description
query	string	yes	GraphQL query string
variables	string	–	JSON object of GraphQL variables

No output schema declared.

No examples provided.

github_graphql_repository_overview ~45

Quick GraphQL snapshot: repo, default branch, latest commit, open PR count.

Input Output Examples

Name	Type	Req	Description
name	string	yes	Repository name
owner	string	yes	–

No output schema declared.

No examples provided.

github_list_actions_secrets ~44

List Actions secret names (values are never returned).

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_list_actions_variables ~44

List Actions variables for a repository (non-secret config).

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_list_branches ~47

List branches in a repository.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
per_page	number	–	–
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_list_check_runs_for_ref ~55

List GitHub Actions check runs for a commit ref.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
ref	string	yes	Commit SHA
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_list_collaborators ~55

List collaborators and their permissions.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
per_page	number	–	Results per page (max 100)
repo	string	yes	Repository name

No output schema declared.

No examples provided.

github_list_commits ~73

List commits on a branch or for the whole repo.

Input Output Examples

Name	Type	Req	Description
owner	string	yes	Repository owner (user or org login)
per_page	number	–	Results per page (max 100)
repo	string	yes	Repository name
sha	string	–	Branch or commit SHA to start from

No output schema declared.

No examples provided.

Install

How do I install the GitHub CI/CD MCP Server server?

GitHub CI/CD MCP Server runs locally as an npm package, launched with npx -y @kinus/github-cicd-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @kinus/github-cicd-mcp

Client

Showing Claude. Snippets for every client (markdown)

# add to Claude Code

claude mcp add devstephenke-sys-github-cicd -- npx -y @kinus/github-cicd-mcp

Common questions

What is the GitHub CI/CD MCP Server server?

GitHub CI/CD MCP Server is listed in the public MCP registry as io.github.devstephenke-sys/github-cicd. GitHub CI/CD MCP server with 70 tools for repos, PRs, Actions, deployments, billing, and more. This page covers its npm package (@kinus/github-cicd-mcp).

What tools does the GitHub CI/CD MCP Server server expose?

GitHub CI/CD MCP Server exposes 70 tools: github_get_authenticated_user, github_get_rate_limit, github_create_repository, github_get_repository, github_list_repositories, and 65 more. Their descriptions and schemas cost roughly 4,414 tokens of context every time the server is loaded.

Is the GitHub CI/CD MCP Server server still maintained?

GitHub CI/CD MCP Server is still listed as active in the MCP registry. We last reached this channel on 19 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the GitHub CI/CD MCP Server server under?

GitHub CI/CD MCP Server declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Badge

Put this score in your README. The image is served from a stable URL, updates when the score does, and links back to the evidence on this page. It shows nothing that is not already published here.

Score Verified Plain

The two-cell badge: our name, and this channel's current score out of 100.

Markdown

 [![VerifyMCP trust score for GitHub CI/CD MCP Server](https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg)](https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp)

HTML

 <a href="https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp"><img src="https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg" alt="VerifyMCP trust score for GitHub CI/CD MCP Server" height="20"></a>

A single cell stating that the server is listed here. Carries no number.

Markdown

 [![VerifyMCP trust score for GitHub CI/CD MCP Server](https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg?variant=verified)](https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp)

HTML

 <a href="https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp"><img src="https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg?variant=verified" alt="VerifyMCP trust score for GitHub CI/CD MCP Server" height="20"></a>

The score alone, tier-coloured, for a badge row that is already crowded.

Markdown

 [![VerifyMCP trust score for GitHub CI/CD MCP Server](https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg?variant=plain)](https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp)

HTML

 <a href="https://verifymcp.io/servers/devstephenke-sys-github-cicd/kinus-github-cicd-mcp"><img src="https://verifymcp.io/badge/devstephenke-sys-github-cicd/kinus-github-cicd-mcp.svg?variant=plain" alt="VerifyMCP trust score for GitHub CI/CD MCP Server" height="20"></a>

Score history · last 30 days

13 Oct 19 Oct

Day	Score
13 Oct	0
14 Oct	0
15 Oct	0
16 Oct	0
17 Oct	0
18 Oct	0
19 Oct	0